6
votes
2answers
2k views

Known security vulnerabilities in JBoss 4.x.x?

We just had a breach of one of our servers, where an intruder got access using the JBoss account and started running exploit scripts. The server has been taken offline and is being investigated, but ...
9
votes
5answers
2k views

Keyboards immune to signal monitoring?

Reading a couple questions and answers here recently got me to thinking. Wireless keyboards run the inherent risk of exposing their data due to the relatively broad transmission range, and the ease ...
5
votes
2answers
144 views

Monitoring a specific application for creation or modification of files

I don't know if I'm looking for a file integrity monitoring software here. Basically let's say we have firefox or chromium, let's say the user is watching a youtube video, then we'll find that video ...
2
votes
1answer
410 views

Possible to use “Blackberry Protect” in conjunction with a BES IT Policy?

Is it possible to use Blackberry Protect in conjunction with a BES IT policy? If so, what settings are incompatible? So far I discovered that Memory encryption appears to be incompatible, but I'd ...
14
votes
4answers
3k views

Is AJAX fundamentally insecure?

Possible Duplicate: How to do Ajax securely? At my workplace many people believe that AJAX is fundamentally insecure. I am under the impression that AJAX is exactly as secure as any other ...
15
votes
2answers
4k views

Wireless keyboard sniffing risk

I've just acquired a wireless keyboard/mouse combo (Microsoft Wireless Desktop 3000). Only after having plugged it in did it get me thinking. How susceptible are those kind of setups to sniffing? Are ...
11
votes
3answers
3k views

How can I prevent someone from accessing a Windows XP system via boot disk?

Apparently a computer system protected by a a login password, e.g. Windows XP, can be easily hacked by someone with physical access to it using methods like this one: ...
12
votes
3answers
342 views

Verifying server software integrity?

I'm trying to brainstorm a security scheme for the problem of verifying server software integrity. The domain of this problem is Game Servers built on Valve's Source Dedicated Servers. These servers ...
1
vote
1answer
293 views

Effectiveness of Belarc Advisor

I have seen some people recommend Belarc Advisor for Windows hardening, especially for servers. It's supposed to check for stuff such as installed hotfixes and CIS benchmarks (<-- which are great, ...
12
votes
1answer
1k views

How to make a report after a ddos attack? what information do I need to write on the report?

In my company, after a DDOS against a server, my employer asked me to make an analysis of the attack and to write down some stuff. What do you think I need to write down in my report? Is there any ...
3
votes
1answer
958 views

Storing users cookies in a database on a server

I want to use Apple Push Notification Service, so I need a server. This server will have to check a site every x minutes. How the site that has to be checked requires the user to login. So is it ok ...
10
votes
2answers
1k views

Caller ID Spoof and Text Spams – How do they work?

(Posted here after a comment/suggestion from: http://superuser.com/questions/254340/caller-id-spoof-and-text-spams-how-do-they-work. Apologies if deemed not appropraite) A lot of people will have at ...
5
votes
3answers
1k views

Security Architecture - Settings to drive UI and Privileges (Rights) - Role-Based, per User-Account

How do large companies implement their security requirements which are centralized and used to drive things people can do (allowed to call a certain web-service, submit an order, etc.) as well as to ...
10
votes
5answers
6k views

Why do botnets use IRC but not a web service for communication?

IRC seems still the most prominent way for communication within botnets. Why do attackers choose IRC? In my (very naive) opinion, to set up a web service is far more easier.
5
votes
1answer
393 views

Using javascript, is it possible to iterate through all cookies saved in the user browser and send them to me?

Again, I am new to the programming and security world. I should mention that it is just a theoretical question so I can anticipate this kind of attack. Using javascript, is it possible to iterate ...
11
votes
3answers
9k views

License key / Serial number generator and checker

I need a serial number generator and accompanying checker. I would like to be able to set a salt (and maybe a length). The generator should only produce serial numbers that pass the test of the ...
29
votes
3answers
1k views

The valid role of obscurity

That security through obscurity is A Bad Thing is received wisdom and dogma in information security. Telling people why something is to be avoided can be considerably more difficult when there is no ...
14
votes
11answers
7k views

I'm leaving my job and want to erase as many personal details etc. as possible; any tips?

Obviously this is very open-ended. But, I'm just paranoid about people going through everything on my laptop after I leave my job. Here are the things I'm planning to do: Completely wipe all browser ...
0
votes
2answers
6k views

Replacing windows shell for everybody but the system administrator

[cross posted from superuser - I believe the question is also relevant here] I'm trying to harden a windows 7 machine, including replacing the default login shell from explorer.exe to a custom ...
18
votes
7answers
12k views

Comparing online security courses: eLearnSecurity vs. Offensive-Security

I'm a web programmer, using the Linux environment for 2 years.(I have experience with Web app hacks +Web app security techniques) I want to start studying security in-depth, but I have limited time ...
19
votes
3answers
1k views

Why do some sites block pasting into username or password input fields?

I use a few websites that prevent me from copying & pasting into the username or password fields. It's quite frustrating when using a password manager, and if anything I'd think it discourages ...
1
vote
2answers
145 views

I am still logged in using a browser X, can CSRF attack work when I use another (default) browser Y on the same machine?

I am still logged in using a browser X, can CSRF attack work when I use another (default) browser Y on the same machine? Edit Assume the web server has CSRF vulnerability. No hidden token checking ...
3
votes
1answer
353 views

tripwire report - inode number

I am investigating Tripwire and have stumbled upon something about which I am unsure. In a tripwire report generated after I modified hosts.deny to include an extra #, I noticed the inode number ...
5
votes
3answers
297 views

Some good resources on viruses/worms?

I am searching good info on sophisticated viruses/worms. One example would be STUXNET and the very good analysis made by folks from Symantec. Any ideas?
15
votes
5answers
2k views

Different strategies for online anonymity and their +/-s?

I saw this question about anonymous web browser, but I wanted to go a little bit more in depth. I prefer answers that take into account how a connection would be traced back, time it would take to ...
12
votes
2answers
588 views

Is a large number of RSA-encrypted files a vulnerability?

Would having a large number (10^4) of RSA encrypted files make it easier for an attacker to find my private RSA key? Update: These files would be available to the attacker, and perhaps the content of ...
9
votes
1answer
2k views

TLS replay attack - requirements of the serverHello nonce

As you all know, the SSL/TLS protocol requires both client and server to exchange (in clear text) a random number or nonce. This is presumably used to prevent replay attacks. It is not clear to me ...
4
votes
3answers
255 views

packet sniffers and segments

Just curious why most packet sniffers are limited to their segment? is it the nature of a gateway to block the attempt outside a subnet? cheers
10
votes
9answers
1k views

Why do we authenticate by prompting a user to enter both username and password? Does prompting the password only suffice?

I don't know why do we authenticate by prompting the user to enter both username and password. In my mental model, prompting password only suffices. The reason is as follows: Assume there are x ...
7
votes
4answers
2k views

Is there a real risk of exploitation in java code where a null pointer is dereferenced

I'm playing with some generally well written and parsed java code, but there are some oddities thrown up by my code scanning tool. I know a null pointer dereference can crash a program, but assuming ...
11
votes
1answer
3k views

Is WPA2 WiFi protected against ARP poisoning and sniffing?

Is WPA2 WiFi protected against ARP poisoning? If not, can the ARP poisoner decrypt the packets?
9
votes
4answers
599 views

How to ensure account security when accessing emails when overseas?

First of all, I hope this is the right stackexchange to ask this. Seems to be most relevant here. Now, if one is planning to go overseas and he/she has a lot of data on the email account (say, gmail) ...
3
votes
1answer
250 views

Checkpoint NGX IPS & NAT

how does CheckPoint R65/R70 handle IPS violations of outbound traffic from hosts that are NAT'ed? Is it necessary to include the NAT'ed IP in the exceptions list or is it sufficient to include the ...
7
votes
5answers
2k views

Best Security Conferences? [closed]

Not sure if this question is too broad, if it is please let me know, we could probably turn it into a wiki. I'm posting this as a reference for other users. What would you say are the best ...
5
votes
2answers
759 views

Should I go for Master of Science by GIAC SANS and what to do with my expiring GSEC cert?

I am now concentrating on my startup which is basically a one-man show. At the same time, i just received an email from SANS Technology Institute’s (STI) about their exciting new accelerated option ...
13
votes
5answers
1k views

Code Analysis: Binary vs Source

While conducting a software security assessment, if you have access to the source code of a compiled application (say C++), would you ever do any analysis upon the compiled version, either with any ...
9
votes
3answers
890 views

Demonstrating SQL injection on the following

I've got lines in my php/mysql code which look like this: ... $sqlquery = "SELECT price FROM products WHERE 1=1 AND id=".$_POST['id']; ... ... query is executed ... echo $price; As a ...
28
votes
5answers
19k views

Should RSA public exponent be only in {3, 5, 17, 257 or 65537} due to security considerations?

In my project I'm using the value of public exponent of 4451h. I thought it's safe and ok until I started to use one commercial RSA encryption library. If I use this exponent with this library, it ...
34
votes
8answers
3k views

Should I bother teaching buffer overflows any more?

The students are skeptical that turning off non-executable stacks, turning off canaries and turning off ASLR represents a realistic environment. If PaX, DEP, W^X, etc., are effective at stopping ...
6
votes
1answer
736 views

Intrusion Prevention Logs

I received an email from a client with IDS logs. I was wondering if the following log has any real indications of the server being compromised. If there are certain things I can do to diagnose the ...
9
votes
3answers
938 views

How do I secure my SaaS startup?

I came across this question I like to offer my startup also for security advice. Objective: building a SaaS web application that allows businesses to quickly open up online stores akin to Yahoo! ...
6
votes
2answers
231 views

plugins to lengthen short urls for security purposes

Came across this question What browser plugins can help us to see the actual destination of such shortened URLs?
17
votes
11answers
3k views

2 factor authentication - cost effective solution for a web startup

My local bank uses a 2 factor authentication where customers key in password AND a One Time PIN delivered via SMS to mobile phone OR from a security token device. I am doing a web startup in the ...
2
votes
1answer
775 views

Pen test cell-phones

A customer has asked to conduct a pen-test on the phones of employees. The target is text messages in the phones. Text messages are stored on the SIM for security reasons. Physical access to the ...
6
votes
3answers
1k views

IIS and SQLServer Hardening

long story short: I'm an engineer doing development, not administration. I have no direct access to the production server, so I can only tell the administration team the best configurations for ...
13
votes
2answers
26k views

What are the differences between MD5, SHA and RSA?

MD5 tools output hexadecimal values. In the same manner, do SHA and RSA together produce a hexadecimal (or any other) output? What are the differences between the MD5, SHA and RSA algorithms?
26
votes
12answers
2k views

List of good security blogs one should read

I graduated this year and am working in the security domain. I want to explore security topics and don't have a strong background since it was not part of our curriculum. Can you list some good ...
3
votes
2answers
322 views

MD5 display format

When I run MD5 algorithm I am getting an output in numeric and a few lower case letters. Obviously it uses all numeric digits and rarely i saw some lower case alphabet letter. I need to understand ...
9
votes
4answers
999 views

Software vs Hardware Firewalls

I read an article (can't find link) recently that advocated dumping software firewalls if you had a hardware firewall. I was just curious as to the take on Firewalls in general for a small-medium ...
5
votes
1answer
659 views

access control to data-center using rfid

I don't know if "here" is the right place to make this kind of question... so here it is.. Is rfid a good solution for controlling access to a data-center? Because rfid is "wireless", is it ...

15 30 50 per page